Skip to content
Fencer Vulns
high 7.7

CVE-2021-21272 json

zip slip in ORAS

published 2021-01-25 5 y ago modified 2026-09-08 2 mo ago also BIT-oras-2021-21272 , EUVD-2022-0997 , GHSA-g5v4-5x39-vwhx , GO-2021-0099

cvss
7.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.5%
EPSS 1.5% chance of exploitation in 30 days, percentile 73%
public exploits
0
none known

Summary

ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In ORAS from version 0.4.0 and before version 0.9.0, there is a "zip-slip" vulnerability. The directory support feature allows the downloaded gzipped tarballs to be automatically extracted to the user-specified directory where the tarball can have symbolic links and hard links. A well-crafted tarball or tarballs allow malicious artifact providers linking, writing, or overwriting specific files on the host filesystem outside of the user-specified directory unexpectedly with the same permissions as the user who runs `oras pull`. Users of the affected versions are impacted if they are `oras` CLI users who runs `oras pull`, or if they are Go programs, which invoke `github.com/deislabs/oras/pkg/content.FileStore`. The problem has been fixed in version 0.9.0. For `oras` CLI users, there is no workarounds other than pulling from a trusted artifact provider. For `oras` package users, the workaround is to not use `github.com/deislabs/oras/pkg/content.FileStore`, and use other content stores instead, or pull from a trusted artifact provider.

Patch / fix

  • go github.com/deislabs/oras 0.9.0
  • bitnami oras 0.9.0
  • deislabs oras 0.9.0
  • helm SLE Module for Package Hub 15 SP4, SLE Module for Containers 15 SP4, openSUSE Leap 15.4 +1 more 3.10.3-150000.1.13.1

suse advisories SUSE-SU-2022:4606-1

  • helm3 openSUSE Tumbleweed 3.19.2-1.1
  • helm openSUSE Tumbleweed 3.9.4-3.1

opensuse advisories openSUSE-SU-2025:15779-1openSUSE-SU-2024:12345-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2021-21272 updated cvss 7.1

oras: zip-slip vulnerability via oras-pull

  • Red Hat Advanced Cluster Management for Kubernetes 2 search-collector, search-collector-rhel8, multicluster-monitoring-operator, multicloud-operators-subscription, multicloud-operators-subscription-release Red Hat Advanced Cluster Security 3 rox
    affected: no fix available
  • Red Hat OpenShift Container Platform 4 openshift4/ose-console, openshift4/cnf-tests-rhel8, openshift4/ose-ptp-operator, openshift4/ose-helm-operator, openshift4/ose-ansible-operator, openshift4/compliance-rhel8-operator, +2 more Red Hat OpenShift Container Platform Assisted Installer 1 rhai-tech-preview/assisted-installer-rhel8, rhai-tech-preview/assisted-installer-agent-rhel8, rhai-tech-preview/assisted-installer-reporter-rhel8
    affected: no fix available “Fix deferred”
  • Red Hat Openshift Container Storage 4 ocs4/mcg-rhel8-operator, ocs4/ocs-rhel8-operator
    affected: no fix available, no fix planned “Out of support scope”
  • Red Hat OpenShift Container Platform 4 openshift4/ose-sriov-network-webhook, openshift4/ose-sriov-network-operator, openshift4/ose-sriov-operator-must-gather, openshift4/ose-sriov-network-config-daemon, openshift4-wincw/windows-machine-config-rhel8-operator Red Hat Openshift Container Storage 4 ocs4/ocs-must-gather-rhel8 Red Hat OpenShift Virtualization 2 vm-import-operator-container, hostpath-provisioner-container, node-maintenance-operator-container, kubernetes-nmstate-handler-container, hostpath-provisioner-operator-container, cluster-network-addons-operator-container, +2 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.47% chance of exploitation in the next 30 days, higher than 73% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
GitHub 3.1 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
NVD 3.1 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
NVD 2.0 4.0 AV:N/AC:L/Au:S/C:N/I:P/A:N
OSV 3.1 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

Affected packages

ecosystem package affected fixed in
go github.com/deislabs/oras
<0.9.0
0.9.0
bitnami oras
>=0.4.0, <0.9.0
0.9.0

Affected products

  • deislabs oras

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory
  • CWE-59 Improper Link Resolution Before File Access

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.